CyberRota Analysis
AI-GeneratedPrior to version 7.2.0, Incus, a system container and virtual machine manager, is vulnerable to exploitation via specially crafted images that can read or create/write arbitrary files on the host system, potentially allowing for arbitrary command execution. Organizations using affected versions should prioritize upgrading to version 7.2.0 to mitigate this critical risk. This vulnerability poses a significant threat to system integrity and security, making it essential for users of Incus to address it immediately.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue.